Is it possible to use a mix of Atlassian and SAML accounts?

[Chris Imeson]

I am considering setting up SAML authentication on our subscription but we currently have a mix of Internal users and External users using the application.  I'd like Internal users to authenticate using SAML but would still like the possibility of providing contractors access using the Atlassian account.  Is this possible?

[K. Yamamoto · Accepted solution]

Hi Chris

It is possible. Here's the authentication flow when you mixed those two authentication options:

1. When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
2. The login form behaves based on your email address:
   • If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
   • If not, you will be asked to enter your Atlassian Cloud's password

Hope this helps.

[Wilfried Jonker]

Thank you for the clear and concise response. I was also wondering if this would be possible.

[K. Yamamoto]

Glad to hear my response was helpful for you, Wilfried. And thanks for voting up the answer. Please feel free to ask in the community if you have other questions.

[Damian Egli]

Hi

but then we can't use User and Group provisioning from Azure to Atlassian Cloud Products as we can't assign external users to our provided groups. Is that correct?

So am I right then, that only SAML work and provisioning of our "internal" ( aka verified domain) users?

thanks and regards, Damian

[K. Yamamoto]

Hi Damian,

Both are correct. Maybe you want to provide an email address to external users (which can have a different domain from the one for internal users) if you need to manage them with Atlassian Access.

[Damian Egli]

But this Mail Adress we would provide must contain a verfied domain?

[K. Yamamoto]

That is correct. You can associate multiple domains with an organization.

[M]

Sorry for digging this old question. 

I would like to know, how to associate multiple domains with an organisation?

Secondly, If multiple domains are associated with an organisation, can the external users have their own Jira organisation verified domain?